Approved changes feed: RSS · Atom

cpe:2.3:a:symantec:messaging_gateway:9.5.3:*:*:*:*:*:*:*

part: a version: 9.5.3 update: *

VendorSymantec (88d7b611-7ce9-5631-abc6-1312dc87ce23)
ProductMessaging Gateway (3ed692e8-3d83-5e4e-86a7-9314ce3c657b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-4347 vulnerable 2026-06-08 05:02:17.076337 Details available
Multiple directory traversal vulnerabilities in the management console in Symantec Messaging Gateway (SMG) 9.5.x allow remote authenticated users to read arbitrary files via a .. (dot dot) in the (1) logFile parameter in a logs action to brightmail/export or (2) localBackupFileSelection parameter in an APPLIANCE restoreSource action to brightmail/admin/restore/download.do.
Published: 2012-12-05T11:00:00.000Z
Updated: 2024-08-06T20:35:09.416Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3581 vulnerable 2026-06-08 05:02:11.010883 Details available
Symantec Messaging Gateway (SMG) before 10.0 allows remote attackers to obtain potentially sensitive information about component versions via unspecified vectors.
Published: 2012-08-29T10:00:00.000Z
Updated: 2024-08-06T20:13:50.699Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3580 vulnerable 2026-06-08 05:02:11.010498 Details available
Symantec Messaging Gateway (SMG) before 10.0 allows remote authenticated users to modify the web application by leveraging access to the management interface.
Published: 2012-08-29T10:00:00.000Z
Updated: 2024-08-06T20:13:50.640Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3579 vulnerable 2026-06-08 05:02:11.009992 Details available
Symantec Messaging Gateway (SMG) before 10.0 has a default password for an unspecified account, which makes it easier for remote attackers to obtain privileged access via an SSH session.
Published: 2012-08-29T10:00:00.000Z
Updated: 2024-08-06T20:13:51.301Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0308 vulnerable 2026-06-08 05:00:40.622719 Details available
Cross-site request forgery (CSRF) vulnerability in Symantec Messaging Gateway (SMG) before 10.0 allows remote attackers to hijack the authentication of administrators.
Published: 2012-08-29T10:00:00.000Z
Updated: 2024-08-06T18:23:30.753Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0307 vulnerable 2026-06-08 05:00:40.622100 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.